Cribl data input configuration fields

reference australia Updated Sep 10, 2026 1 min read hla-data-input-cribl-ref.md
Raw file servicenow.com

Description of the fields on the Cribl data input configuration form.

Field

Description

Data input name

Name of the new data input. This field is required.

Description

Optional description of the data input.

MID server

The MID Server to which the Cribl logs are streamed. This field is required.

Port

The port on the MID Server used for listening to logs. This field is required.Important: Enter a unique port that no other application on the MID Server uses. Ask your security team to allow traffic on this port between the MID Server and the log sources.

Field

Description

Cribl instance URL

The URL of the Cribl instance. HLA uses this URL to establish the connection with the Cribl instance.

Cribl API token

The Cribl API token HLA uses to authenticate with Cribl and make API calls.

Field

Description

Cribl route

The Cribl route that directs log data to a specific destination. This field is required.This field is auto-populated with a drop-down list of all available routes, each configured with a default destination. You must select the desired route from this list.

Cribl destination

The created Cribl destination. This field is read-only. The Cribl destination points to the MID Server host and port configured in the data input.

**Parent Topic:**[Data input configuration fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/health-log-analytics/hla-data-input-config-fields.md)
Search documentation
Search document titles and file paths on the australia branch